← Database

CVE-2022-35698

CRITICAL CVSS: 10.0 Published: 2022-10-14 Modified: 2026-06-17

Description

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Affected Platforms

Adobe CommerceAdobe Magento Open Source

Weakness Type

CWE-79

References